Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Y9DXYB9QiiS_-UQEJTwq1iyRYkA.roa
File: Y9DXYB9QiiS_-UQEJTwq1iyRYkA.roa (raw, json)
Hash identifier: MaUzKiaE/f2J6WSgO/QgANlqs/vHfLcoJ0hZ01xq1zY=
Subject key identifier: 63:D0:D7:60:1F:50:8A:24:BF:F9:44:04:25:3C:2A:D6:2C:91:62:40
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01856C6EF5F77B6B97C099E7628854D74A4B
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Y9DXYB9QiiS_-UQEJTwq1iyRYkA.roa
Signing time: Sun 01 Jan 2023 08:24:49 +0000
ROA not before: Sun 01 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6900
IP address blocks: 195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
195.203.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f5:f7:7b:6b:97:c0:99:e7:62:88:54:d7:4a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 1 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63d0d7601f508a24bff94404253c2ad62c916240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:b9:b7:31:bd:21:e4:25:11:62:f7:6c:db:
0b:79:37:9c:c2:f9:10:06:3d:de:e1:6a:18:f9:ea:
cd:6f:11:ba:d3:21:8f:83:3a:c4:2b:47:6f:d7:6d:
0f:3e:f7:05:2e:85:a7:e1:2e:f3:f8:ff:1b:c8:58:
8a:fa:0e:5e:7d:58:0f:fc:ef:e9:61:ac:b6:bf:d7:
b3:a3:21:ac:bf:47:a7:20:a0:ca:6e:13:bf:58:80:
ba:28:0b:60:87:aa:f0:4f:d5:e7:28:8d:86:76:33:
50:94:48:16:f9:be:ef:15:96:21:20:ee:d5:36:ac:
6d:d8:8b:cf:82:60:ee:24:8b:5a:20:ef:ef:2d:c9:
88:07:48:4c:f3:10:43:a6:b0:bd:65:ec:5a:16:1e:
6f:74:4a:cd:bf:a5:9d:c4:49:41:3c:7b:ed:86:22:
22:d8:f3:6d:1f:78:b1:76:6c:de:d1:35:91:0b:98:
8a:ec:4c:22:ad:4b:1e:a5:ec:d3:6e:b1:38:4a:09:
d5:d4:17:7e:0d:a0:2f:38:28:9f:e9:d4:aa:e0:89:
5e:3a:e6:ff:a5:a1:82:54:c2:02:04:d0:9b:9a:3f:
e1:9b:00:23:d7:74:3d:09:91:2e:fe:f6:f9:2c:10:
a0:f1:2f:8d:a1:47:e2:c2:4c:d8:91:d5:36:5a:35:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:D7:60:1F:50:8A:24:BF:F9:44:04:25:3C:2A:D6:2C:91:62:40
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Y9DXYB9QiiS_-UQEJTwq1iyRYkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.127.0/24
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:82:9c:09:00:db:e9:20:8f:62:54:75:a7:c3:db:6b:c4:d9:
79:ec:e7:09:ad:8f:c1:86:c8:77:34:8a:e7:13:7e:e2:c5:97:
c3:79:19:8b:3e:1b:20:2c:2e:da:04:4f:e7:27:07:cc:c6:ba:
68:b3:e5:45:e9:ac:c5:23:09:8c:e5:9d:3c:76:f3:f5:1e:a5:
72:72:c9:a7:85:02:43:04:74:4c:cb:0f:fa:a0:24:78:8e:09:
60:8a:64:e3:18:0b:e4:18:a0:bf:e8:e7:24:1c:f8:2b:ea:10:
87:dd:ff:c0:3d:68:f8:ee:f9:75:5a:ae:49:9f:18:59:73:1c:
71:bd:3b:a9:0e:0e:3d:ea:93:e4:78:13:d2:fc:77:2f:3a:39:
df:d7:8a:17:6b:81:d9:00:f9:2c:64:aa:ad:e6:aa:b2:c2:ba:
6b:01:b3:a9:07:a0:2c:6b:2a:84:eb:98:1d:a6:0b:c3:ab:14:
22:78:eb:fe:8c:02:dd:f8:8d:94:33:7e:13:7b:eb:7d:67:32:
94:f7:bb:52:b7:bd:d3:de:6d:46:69:32:fc:87:97:22:13:a1:
d2:26:16:dc:cd:60:95:5a:87:31:0a:58:0a:c8:9a:4e:10:d4:
46:15:dc:55:15:43:0a:52:dc:30:be:4d:62:20:2c:7e:5b:11:
60:31:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org